CVE-2003-0363

The CVE-2003-0363 entry covers a format string vulnerability in LICQ versions 1.2.6 and 1.0.3 (and possibly others). The underlying issue is a format string vulnerability in which an attacker can influence format specifiers to perform unknown actions remotely. The vulnerability affects LICQ’s han...

CVE-2003-0363

Format string vulnerability in LICQ 1.2.6, 1.0.3 and possibly other versions allows remote attackers to perform unknown actions via format string specifiers...

CVE-2005-1122

Format string vulnerability in cgi.c for Monkey daemon monkeyd before 0.9.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an HTTP GET request containing double-encoded format string specifiers aka "double expansion error"...

oops -- format string vulnerability

A RST/GHC Advisory reports that there is an format string vulnerability in oops. The vulnerability can be found in the MySQL/PgSQL authentication module. Succesful exploitation may allow execution of arbitrary code...

CVE-2005-1100

CVE-2005-1100 affects Greylisting daemon (GLD) 1.3 and 1.4. The vulnerability is a format-string bug in the ErrorLog function (cnf.c) that allows remote code execution via data passed to syslog. Linked advisories (GLSA 200504-10) describe remote arbitrary-code execution due to format-string issue...

CVE-2005-1100

Format string vulnerability in the ErrorLog function in cnf.c in Greylisting daemon GLD 1.3 and 1.4 allows remote attackers to execute arbitrary code via format string specifiers in data that is passed directly to syslog...

PT-2005-1982 · Mtftpd · Mtftpd

Name of the Vulnerable Software and Affected Versions: mtftpd version 0.0.3 Description: The issue is related to a format string vulnerability in the log do function in log.c. This vulnerability can be exploited when the statistics option is enabled, allowing remote attackers to execute arbitrary...

Mandrake Linux Security Advisory : ImageMagick (MDKSA-2005:065)

A format string vulnerability was discovered in ImageMagick, in the way it handles filenames. An attacker could execute arbitrary code on a victim's machine provided they could trick them into opening a file with a special name CVE-2005-0397. As well, Andrei Nigmatulin discovered a heap-based...

mtftpd <= 0.0.3 format string vulnerability

mtftpd = 0.0.3 format string vulnerability number: 15 author: darkeagle date: xx.10.04 vendor: http://mtftpd.sourceforge.net status: mtftpd don't supported overview: mtftpd - simple ftp daemon in Unix like systems. details: 1st of all... i wanna said, that this bug was stollen by setnf. i said to...

CVE-2005-0484

Format string vulnerability in gprostats for GProFTPD before 8.1.9 may allow remote attackers to execute arbitrary code via an FTP transfer with a crafted filename that causes format string specifiers to be inserted into the ProFTPD transfer log...

GLSA-200503-34 : mpg321: Format string vulnerability

The remote host is affected by the vulnerability described in GLSA-200503-34 mpg321: Format string vulnerability A routine security audit of the mpg321 package revealed a known security issue remained unpatched. The vulnerability is a result of mpg321 printing embedded ID3 data to the console in ...

SUSE-SA:2005:017: ImageMagick

The remote host is missing the patch for the advisory SUSE-SA:2005:017 ImageMagick. This update fixes several security issues in the ImageMagick program suite: - A format string vulnerability was found in the display program which could lead to a remote attacker being to able to execute code as t...

CVE-2005-0804

Format string vulnerability in MailEnable 1.8 allows remote attackers to cause a denial of service application crash via format string specifiers in the mailto field...

CVE-2005-0770

CVE-2005-0770 affects DataRescue IDA Pro 4.7.0.830. The vulnerability is a format string flaw in the DLL name, enabling a remote attacker or local user to trigger denial of service (CPU consumption or app crash) and possibly execute arbitrary code. Impact includes DoS and potential code execution...

See-security Advisory: Format string vulnerability in MailEnable 1.8

See-security Technologies ltd. http://www.see-security.com - Product Information MailEnable Standard Edition provides robust SMTP and POP3 services for Windows NT/2000/XP/2003 systems. - Vulnerability Description MailEnable contains a format string vulnerability in the it handles SMTP mailto:...

MailEnable Standard SMTP mailto: Request Format String

The remote host is running a version of MailEnable Standard Edition that suffers from a format string vulnerability in its handling of SMTP commands. Specifically, a remote attacker can crash the SMTP daemon by sending a command with a format specifier as an argument. Due to the nature of the fla...

PlatinumFTP Server < 2.0 Remote Format String DoS

Binary data 2700.prm...

ISC DHCP contains a format string vulnerabilty in errwarn.c

Overview The Internet Systems Consortium ISC Dynamic Host Configuration Protocol DHCP application contains a format string vulnerability in errwarn.c that could allow an attacker to execute arbitrary code. Description As described in RFC 2131, "The Dynamic Host Configuration Protocol DHCP provide...

CVE-2005-0665

The CVE-2005-0665 entry describes a format-string vulnerability in xv (pre-3.10a) that lets remote attackers execute arbitrary code via crafted filenames. Root cause: processing of format specifiers in filenames. Impact: arbitrary code execution on affected xv deployments. Remediation: upgrade to...

CVE-2005-0671

Ca3DE (Carsten’s 3D Engine) is affected: the March 2004 version and earlier contain a format string vulnerability in a command that allows remote code execution. Root cause is improper handling of format strings in the engine, enabling an attacker to supply format specifiers that are interpreted ...